RHSA-2026:82939
Vulnerability from csaf_redhat - Published: 2026-10-14 13:34 - Updated: 2026-10-16 18:32Summary
Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
Severity
Important
Notes
Topic: The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.
Details: Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.
This release updates to the latest version.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libpcap. The Berkeley Packet Filter (BPF) interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to read and write arbitrary operating system process memory, potentially leading to information disclosure or arbitrary code execution.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64 | — |
Threats
Impact
Important
A flaw was found in glibc (GNU C Library). A local attacker or application using the wordexp function with the WRDE_APPEND flag can trigger the interface to return invalid memory in the we_wordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort, leading to a Denial of Service (DoS).
5.5 (Medium)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in glibc. When processing paths that start with a tilde (~) followed by a username, the `wordexp` function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhaustion and causing a denial of service (DoS) for the affected application.
5.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity.
6.5 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in curl. When `libcurl` performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This could lead to unintended information disclosure, potentially allowing an attacker to gain unauthorized access to sensitive data.
6.5 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.
7.0 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in the GNU C Library (glibc). This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the `fopen` function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive information.
4.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.sni_callback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the server process or result in a call through a freed pointer. Servers that wrap their listening socket with a long-lived SSLContext are not affected. TLS clients are not affected.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the `tdelete` function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of service or disclose sensitive information.
4.2 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in Python. When establishing secure connections using the SSLContext.wrap_bio() function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rather than triggering an error. A remote man-in-the-middle attacker could exploit this defect to spoof trusted endpoints and intercept or tamper with sensitive encrypted traffic.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-19445
Known not affected
1 product, the same list as for
CVE-2026-19445
Threats
Impact
Important
A flaw was found in gawk. A Use After Free vulnerability exists in the do_getline_redir() routine within the io.c program file. This vulnerability can be triggered by an attacker, potentially leading to a system crash and causing a Denial of Service (DoS).
4.0 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in gawk. An integer overflow vulnerability could allow a local attacker to cause memory exhaustion, leading to a denial of service. This flaw may also enable an attacker to corrupt gawk's internal memory, potentially leading to system instability.
4.4 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in gawk. A buffer overflow vulnerability exists in the `ftype()` routine, located in the `extension/readdir.c` program file. This vulnerability could allow an attacker to crash the program, resulting in a denial of service. It may also potentially lead to arbitrary code execution, though this has not been definitively confirmed.
6.2 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in OpenSSH's SSH daemon (sshd). A remote attacker could exploit this vulnerability by repeatedly attempting authentication. The flaw allows the attacker to bypass the intended minimum authentication delay, which can facilitate brute-force attacks. This makes it easier for an attacker to guess valid credentials, potentially leading to unauthorized access or a denial of service.
6.5 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64 | — |
Threats
Impact
Moderate
A flaw was found in the Expat XML parsing library. A remote, unauthenticated attacker can supply a specially crafted XML document to trigger quadratic algorithmic complexity in the storeAtts() function, causing excessive CPU consumption and a denial of service
7.5 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently, operating-system commands on the user's system. Successful exploitation requires a user to open a C file from an attacker-controlled tree and invoke C omni-completion on a member access whose type is resolved from the malicious tags file.
7.3 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.
8.5 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text.
5.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in glibc. Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding (for example with iconv) can cause the converter to make no progress, hanging the calling application. Some EUC_JISX0213 sequences decode to two code points; if the output buffer has room for only the first, the second is stored in conversion state and returned as E2BIG, but that pending character is never cleared after it is emitted on the next call, so retries loop forever without consuming further input.
5.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process.
7.4 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the `xmlDictAddQString` function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its integrity and confidentiality.
6.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the `xmlSnprintfElements` function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited.
7.4 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer() expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure, data corruption, or a denial of service (DoS).
6.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity.
6.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw in libxml2's XInclude processing (xmlXIncludeProcess and xmlXIncludeProcessTree) fails to propagate parser flags like XML_PARSE_NONET. This allows custom resource loaders to fetch external network resources, potentially enabling Server-Side Request Forgery (SSRF), XML External Entity (XXE) injection, or Denial of Service (DoS) attacks.
5.6 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the `pcre2_dfa_match` function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction with a small heap limit. This could lead to data corruption or potentially arbitrary code execution, compromising the integrity and availability of the system.
8.2 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in PCRE2. An attacker can provide invalid UTF (Unicode Transformation Format) data, leading to an out-of-bounds read during a Just-In-Time (JIT) fallback. This vulnerability could potentially result in a denial of service.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Low
A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2_pattern_convert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability impact, causing a denial of service.
5.7 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.
6.5 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Moderate
A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF (Unicode Transformation Format) characters. This could lead to a denial of service, making the affected system or application unavailable.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Low
A flaw was found in PCRE2, a library for processing regular expressions. The `pcre2_jit_match` function, which handles just-in-time (JIT) compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to cause the application to crash, leading to a denial of service, or potentially execute unauthorized code.
7.4 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in Expat. This vulnerability allows a remote attacker to send specially crafted UTF-16 encoded XML data. Due to improper validation of surrogate characters, the parser can be tricked into accepting malformed sequences, which can hide legitimate markup characters. This could enable XML injection attacks, potentially leading to information disclosure or other integrity impacts.
7.5 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an unprivileged local user can set TZ to an extreme timezone offset to shift the authorization window by up to approximately 25 hours, causing expired rules to be treated as valid. This allows the user to execute commands outside the intended time window. Authentication is not bypassed; only the time-based authorization check is affected.
7.8 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-60001
Known not affected
3 products, the same list as for
CVE-2026-60001
Threats
Impact
Important
A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time (JIT) compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt memory, or cause a denial of service (DoS).
7.6 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-6368
Threats
Impact
Important
References
227 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.\nThis release updates to the latest version.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:82939",
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "external",
"summary": "https://access.redhat.com/products/red-hat-update-infrastructure",
"url": "https://access.redhat.com/products/red-hat-update-infrastructure"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-0799",
"url": "https://access.redhat.com/security/cve/CVE-2026-0799"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-103111",
"url": "https://access.redhat.com/security/cve/CVE-2026-103111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11856",
"url": "https://access.redhat.com/security/cve/CVE-2026-11856"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13732",
"url": "https://access.redhat.com/security/cve/CVE-2026-13732"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18374",
"url": "https://access.redhat.com/security/cve/CVE-2026-18374"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19445",
"url": "https://access.redhat.com/security/cve/CVE-2026-19445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19542",
"url": "https://access.redhat.com/security/cve/CVE-2026-19542"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19553",
"url": "https://access.redhat.com/security/cve/CVE-2026-19553"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40467",
"url": "https://access.redhat.com/security/cve/CVE-2026-40467"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40468",
"url": "https://access.redhat.com/security/cve/CVE-2026-40468"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40553",
"url": "https://access.redhat.com/security/cve/CVE-2026-40553"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-60001",
"url": "https://access.redhat.com/security/cve/CVE-2026-60001"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6368",
"url": "https://access.redhat.com/security/cve/CVE-2026-6368"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66046",
"url": "https://access.redhat.com/security/cve/CVE-2026-66046"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6791",
"url": "https://access.redhat.com/security/cve/CVE-2026-6791"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73073",
"url": "https://access.redhat.com/security/cve/CVE-2026-73073"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-74860",
"url": "https://access.redhat.com/security/cve/CVE-2026-74860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-77117",
"url": "https://access.redhat.com/security/cve/CVE-2026-77117"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-80489",
"url": "https://access.redhat.com/security/cve/CVE-2026-80489"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84782",
"url": "https://access.redhat.com/security/cve/CVE-2026-84782"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86138",
"url": "https://access.redhat.com/security/cve/CVE-2026-86138"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86140",
"url": "https://access.redhat.com/security/cve/CVE-2026-86140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86142",
"url": "https://access.redhat.com/security/cve/CVE-2026-86142"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86143",
"url": "https://access.redhat.com/security/cve/CVE-2026-86143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86144",
"url": "https://access.redhat.com/security/cve/CVE-2026-86144"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86145",
"url": "https://access.redhat.com/security/cve/CVE-2026-86145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89156",
"url": "https://access.redhat.com/security/cve/CVE-2026-89156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89157",
"url": "https://access.redhat.com/security/cve/CVE-2026-89157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89158",
"url": "https://access.redhat.com/security/cve/CVE-2026-89158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89160",
"url": "https://access.redhat.com/security/cve/CVE-2026-89160"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89161",
"url": "https://access.redhat.com/security/cve/CVE-2026-89161"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-8924",
"url": "https://access.redhat.com/security/cve/CVE-2026-8924"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-93990",
"url": "https://access.redhat.com/security/cve/CVE-2026-93990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-96512",
"url": "https://access.redhat.com/security/cve/CVE-2026-96512"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5",
"url": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82939.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update",
"tracking": {
"current_release_date": "2026-10-16T18:32:50+00:00",
"generator": {
"date": "2026-10-16T18:32:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:82939",
"initial_release_date": "2026-10-14T13:34:00+00:00",
"revision_history": [
{
"date": "2026-10-14T13:34:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-14T13:34:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-16T18:32:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Update Infrastructure 5",
"product": {
"name": "Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhui:5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Update Infrastructure"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"product_id": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-kubernetes-rhel9@sha256%3Ade9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-kubernetes-rhel9\u0026tag=1791978534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"product_id": "registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-rhel9@sha256%3Ace1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-rhel9\u0026tag=1791978528"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"product": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"product_id": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/haproxy-rhel9@sha256%3A481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/haproxy-rhel9\u0026tag=1791978528"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"product": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"product_id": "registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/installer-rhel9@sha256%3A8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/installer-rhel9\u0026tag=1791964013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64",
"product": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64",
"product_id": "registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhua-rhel9@sha256%3Afa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/rhua-rhel9\u0026tag=1791978693"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
},
"product_reference": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64"
},
"product_reference": "registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
},
"product_reference": "registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-0799",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-05T19:01:11.898118+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libpcap. The Berkeley Packet Filter (BPF) interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to read and write arbitrary operating system process memory, potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in libpcap where a flaw in the BPF interpreter\u0027s register index validation can lead to out-of-bounds memory access. Exploitation requires a local attacker to provide a specially crafted BPF filter program to an application utilizing libpcap, which is considered an uncommon use case. This could result in arbitrary read and write operations within the OS process memory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-0799"
},
{
"category": "external",
"summary": "RHBZ#2529093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-0799",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0799"
},
{
"category": "external",
"summary": "https://github.com/the-tcpdump-group/libpcap/commit/48e8960a7108e9e828f9d7bdc7e97bdab841aec7",
"url": "https://github.com/the-tcpdump-group/libpcap/commit/48e8960a7108e9e828f9d7bdc7e97bdab841aec7"
}
],
"release_date": "2026-09-05T18:48:39.126000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access"
},
{
"cve": "CVE-2026-6368",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-08-10T19:01:24.040753+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513608"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). A local attacker or application using the wordexp function with the WRDE_APPEND flag can trigger the interface to return invalid memory in the we_wordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Process abort due to invalid memory in wordexp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in glibc has Moderate impact, as it can lead to a denial of service. Exploitation requires an application to specifically call `wordexp` with the `WRDE_APPEND` flag, followed by a `wordfree` call, which can result in a process abort. This vulnerability affects applications that utilize this particular programming pattern.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6368"
},
{
"category": "external",
"summary": "RHBZ#2513608",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513608"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6368"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6368",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6368"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34090",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34090"
},
{
"category": "external",
"summary": "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014;h=1e9a0039f07471ddfe6816e5df04875bec409f92;hb=HEAD",
"url": "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014;h=1e9a0039f07471ddfe6816e5df04875bec409f92;hb=HEAD"
}
],
"release_date": "2026-08-10T18:40:11.601000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Process abort due to invalid memory in wordexp"
},
{
"cve": "CVE-2026-6791",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-08-10T19:01:06.466966+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513603"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. When processing paths that start with a tilde (~) followed by a username, the `wordexp` function can be forced to allocate an excessive amount of memory on the program\u0027s stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhaustion and causing a denial of service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6791"
},
{
"category": "external",
"summary": "RHBZ#2513603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6791",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6791"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34091",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34091"
}
],
"release_date": "2026-08-10T18:41:25.122000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion"
},
{
"cve": "CVE-2026-8924",
"cwe": {
"id": "CWE-565",
"name": "Reliance on Cookies without Validation and Integrity Checking"
},
"discovery_date": "2026-07-03T07:01:32.981435+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496765"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl\u0027s cookie parsing logic. A malicious HTTP server can exploit this by setting \u0027super cookies\u0027 that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Cookie injection via malicious HTTP server using super cookies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: Red Hat rates this flaw Moderate (CVSS 6.5) compared to CISA\u0027s Critical (9.1). The scoring difference is due to two factors: first, exploitation requires the victim\u0027s curl to connect using a trailing-dot hostname (e.g., https://example.co.uk.), a format that is uncommon in practice and incompatible with TLS SNI; second, the direct impact is cookie injection into outbound requests \u2014 not exfiltration of victim data to the attacker. The curl project itself rates this flaw Low severity. Red Hat products that use curl for HTTP communication are affected, but the trailing-dot precondition significantly limits real-world exploitability. This flaw has not been shown to enable impacts beyond session integrity modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8924"
},
{
"category": "external",
"summary": "RHBZ#2496765",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496765"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8924",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8924"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8924.html",
"url": "https://curl.se/docs/CVE-2026-8924.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8924.json",
"url": "https://curl.se/docs/CVE-2026-8924.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3733905",
"url": "https://hackerone.com/reports/3733905"
}
],
"release_date": "2026-07-03T06:15:04.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Do not use trailing-dot hostnames in URLs passed to curl. Trailing dots are uncommon and incompatible with TLS SNI. Upgrade to curl 8.21.0 to resolve",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Cookie injection via malicious HTTP server using super cookies"
},
{
"cve": "CVE-2026-11856",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-03T07:01:38.848109+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496767"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When `libcurl` performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This could lead to unintended information disclosure, potentially allowing an attacker to gain unauthorized access to sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Information disclosure via incorrect Digest authentication header reuse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate-severity flaw in `libcurl` can lead to information disclosure when an application reuses a `libcurl` handle for transfers to different HTTP origins while using Digest authentication. The vulnerability arises from `libcurl` incorrectly sending the authentication header intended for the initial origin to a subsequent, different origin. This could expose sensitive authentication data to an unintended recipient, potentially compromising user credentials or session information. The only observed impact from this flaw is an integrity impact.\n\n- libcurl only \u2014 the curl CLI is not affected\n- Requires an application to reuse an easy handle across different HTTP origins while Digest auth state is attached \u2014 a specific programming pattern\n- Credentials themselves are not leaked; only the authenticated state (\"Authorization: ...\" HTTP header)\n- Fixed in curl 8.21.0; affected range: 7.10.6 \u2013 8.20.0",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11856"
},
{
"category": "external",
"summary": "RHBZ#2496767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11856"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-11856.html",
"url": "https://curl.se/docs/CVE-2026-11856.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-11856.json",
"url": "https://curl.se/docs/CVE-2026-11856.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3793260",
"url": "https://hackerone.com/reports/3793260"
}
],
"release_date": "2026-07-03T06:13:31.661000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nCorrect usage of the library: Create a fresh handle for a different origin, or explicitly clear authentication-related state before reuse:\n```c\n// req.A\ncurl = curl_easy_init();\n...\ncurl_easy_cleanup(curl);\n\n\n// req.B\ncurl = curl_easy_init();\n...\ncurl_easy_cleanup(curl);\n```\n\nFixed in libcurl 8.21.0; affected range: 7.10.6 \u2013 8.20.0",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Information disclosure via incorrect Digest authentication header reuse"
},
{
"acknowledgments": [
{
"names": [
"JD Marsters"
],
"organization": "Bhut Red"
}
],
"cve": "CVE-2026-13732",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-29T14:42:56.970000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494416"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GDB\u0027s STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gdb: gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects the STABS debug format parser in GDB, which is present\nand active in all currently supported Red Hat product streams that ship\nGDB. The STABS format is a legacy debug information format predating DWARF\nthat GDB parses automatically from .stab/.stabstr ELF sections. While GCC\nremoved STABS emitting support in GCC 13 and GDB deprecated STABS parsing\nin GDB 17, all deployed GDB versions parse STABS data without user opt-in.\nAn attacker can embed STABS sections in any ELF binary, including one\ncompiled with DWARF debug information, and GDB will parse both. The\nvulnerability requires the user to open the crafted binary in GDB and\nissue a symbol-inspection command, which is normal GDB usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13732"
},
{
"category": "external",
"summary": "RHBZ#2494416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494416"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13732"
}
],
"release_date": "2026-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this\nflaw:\n- Do not open untrusted or unknown ELF binaries in GDB without first\n stripping debug sections. Use `objcopy --remove-section=.stab\n --remove-section=.stabstr \u003cbinary\u003e` before debugging.\n- Use `readelf -S \u003cbinary\u003e | grep stab` to check for the presence of\n STABS sections before opening a binary in GDB. Legitimate modern\n binaries use DWARF, not STABS.\n- Consider using LLDB or other debuggers that do not support STABS for\n analysis of untrusted binaries.\n- For automated environments (CI, test farms) that invoke GDB on\n potentially untrusted binaries, run GDB in a sandboxed or containerized\n environment with restricted filesystem access.\n- GDB 17+ deprecates STABS support but still parses it. GDB 18 (expected\n late 2026/2027) will remove STABS support entirely.\n- GCC removed STABS emitting in GCC 13 (2023), so legitimately compiled\n binaries from recent GCC versions will not contain STABS data.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gdb: gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF"
},
{
"cve": "CVE-2026-18374",
"cwe": {
"id": "CWE-134",
"name": "Use of Externally-Controlled Format String"
},
"discovery_date": "2026-08-27T20:19:54.467518+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the GNU C Library (glibc). This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the `fopen` function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in glibc involves a heap buffer overflow when the `fopen` function processes an attacker-controlled mode string with an effectively empty `,ccs=` extension. Exploitation is highly complex as this specific usage pattern is not common in applications within typical Red Hat Enterprise Linux environments, significantly limiting its practical applicability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18374"
},
{
"category": "external",
"summary": "RHBZ#2525256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18374"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34574",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34574"
},
{
"category": "external",
"summary": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0015",
"url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0015"
}
],
"release_date": "2026-08-27T19:20:40.426000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string"
},
{
"cve": "CVE-2026-19445",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-09-30T16:44:14.851300+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544138"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.sni_callback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the server process or result in a call through a freed pointer. Servers that wrap their listening socket with a long-lived SSLContext are not affected. TLS clients are not affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Use-after-free of a server-side SSLContext when sni_callback switches contexts",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Important. A remote unauthenticated client can trigger a server-side use-after-free when SNI callback code switches SSLSocket.context and drops the last reference to the original SSLContext, which can crash the process or call through a freed pointer (C:H/I:H/A:H). It is not Critical: exploitation requires a specific, non-default server pattern (per-connection or replaced SSLContext with sni_callback); the common pattern of wrapping the listening socket is explicitly not affected, so Attack Complexity is High. Red Hat ASLR, NX, and glibc heap hardening raise the bar for reliable code execution from the UAF but do not remove the crash/DoS impact, so Availability remains High.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19445"
},
{
"category": "external",
"summary": "RHBZ#2544138",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544138"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19445"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/156293",
"url": "https://github.com/python/cpython/issues/156293"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/158504",
"url": "https://github.com/python/cpython/pull/158504"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/"
}
],
"release_date": "2026-09-30T16:16:04.923000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Restrict Python TLS servers that use SSLContext.sni_callback to trusted clients. Keep a strong reference to every SSLContext that registers an SNI callback for the lifetime of the server so the original context cannot be garbage-collected while connections remain open. Prefer wrapping the listening socket with a long-lived SSLContext; that common pattern is not affected. Host heap allocator hardening increases the difficulty of turning the use-after-free into reliable code execution but does not prevent process crashes.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Use-after-free of a server-side SSLContext when sni_callback switches contexts"
},
{
"acknowledgments": [
{
"organization": "Aisle Research",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-19542",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2026-08-25T06:37:34.336000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2523249"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the `tdelete` function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of service or disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: Fix out-of-bounds array write in tdelete",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in glibc\u0027s `tdelete` function requires a local attacker with low privileges and user interaction to trigger an out-of-bounds write. While it could lead to denial of service or information disclosure, the high attack complexity limits its broader impact on Red Hat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19542"
},
{
"category": "external",
"summary": "RHBZ#2523249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523249"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19542",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19542"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19542",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19542"
}
],
"release_date": "2026-08-25T06:49:13.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "This issue is reachable only through applications that use glibc\u0027s tsearch/tdelete APIs and allow construction of extremely deep trees (on the order of a million nodes). Restrict such services to trusted clients and enforce process memory limits so large tree growth is impractical.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: Fix out-of-bounds array write in tdelete"
},
{
"cve": "CVE-2026-19553",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2026-09-30T16:41:50.203373+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544127"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. When establishing secure connections using the SSLContext.wrap_bio() function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rather than triggering an error. A remote man-in-the-middle attacker could exploit this defect to spoof trusted endpoints and intercept or tamper with sensitive encrypted traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Important because a man-in-the-middle attacker can cause Python clients using SSLContext.wrap_bio() (or asyncio TLS helpers that call it) to skip certificate hostname verification when check_hostname is enabled but server_hostname is omitted or empty, compromising confidentiality and integrity of the TLS session (C:H/I:H). It is not Critical: exploitation requires an on-path attacker and that specific API misuse (AC:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19553"
},
{
"category": "external",
"summary": "RHBZ#2544127",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544127"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19553"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19553",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19553"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/156793",
"url": "https://github.com/python/cpython/issues/156793"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/158503",
"url": "https://github.com/python/cpython/pull/158503"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/"
}
],
"release_date": "2026-09-30T16:17:39.368000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Restrict Python TLS clients to trusted networks so an on-path attacker cannot intercept sessions. Applications that use SSLContext.wrap_bio(), asyncio.create_connection(), or loop.start_tls() with check_hostname enabled must pass a non-empty server_hostname; hostname verification then proceeds and this flaw is not reachable. Optionally pin expected server certificates so a mismatched host certificate is rejected even if hostname checking is skipped.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()"
},
{
"cve": "CVE-2026-40467",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-07-13T13:01:40.927366+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499658"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gawk. A Use After Free vulnerability exists in the do_getline_redir() routine within the io.c program file. This vulnerability can be triggered by an attacker, potentially leading to a system crash and causing a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: A Use After Free vulnerability in gawk\u0027s `do_getline_redir()` routine can lead to a denial of service. This flaw, affecting gawk in Red Hat Hardened Images, requires a local attacker with low privileges to trick a user into interacting with specially crafted input, limiting its immediate impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40467"
},
{
"category": "external",
"summary": "RHBZ#2499658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499658"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40467",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40467"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40467",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40467"
},
{
"category": "external",
"summary": "https://cert.pl/en/posts/2026/07/CVE-2026-40467",
"url": "https://cert.pl/en/posts/2026/07/CVE-2026-40467"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8",
"url": "https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8"
}
],
"release_date": "2026-07-13T12:07:52.006000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid processing untrusted or maliciously crafted input with `gawk`. Exercise caution when executing `gawk` scripts or commands that process data from unknown or unverified sources.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c"
},
{
"cve": "CVE-2026-40468",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-13T13:01:04.393054+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499655"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gawk. An integer overflow vulnerability could allow a local attacker to cause memory exhaustion, leading to a denial of service. This flaw may also enable an attacker to corrupt gawk\u0027s internal memory, potentially leading to system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gawk: gawk: Memory corruption via integer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: An integer overflow vulnerability in gawk\u0027s builtin.c could allow a local attacker to cause memory exhaustion and overwrite heap metadata. This could lead to system instability or a denial of service on affected Red Hat products, requiring local access to execute a malicious gawk script.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40468"
},
{
"category": "external",
"summary": "RHBZ#2499655",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499655"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40468"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40468",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40468"
},
{
"category": "external",
"summary": "https://cert.pl/en/posts/2026/07/CVE-2026-40467",
"url": "https://cert.pl/en/posts/2026/07/CVE-2026-40467"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7",
"url": "https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7"
}
],
"release_date": "2026-07-13T12:07:54.910000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Do not execute untrusted awk scripts or process untrusted inputs that could trigger oversized calculations in builtin.c.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gawk: gawk: Memory corruption via integer overflow"
},
{
"cve": "CVE-2026-40553",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2026-07-13T13:01:32.299484+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499657"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gawk. A buffer overflow vulnerability exists in the `ftype()` routine, located in the `extension/readdir.c` program file. This vulnerability could allow an attacker to crash the program, resulting in a denial of service. It may also potentially lead to arbitrary code execution, though this has not been definitively confirmed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: A buffer overflow in gawk\u0027s `ftype()` routine, when processing untrusted input, could lead to a denial of service or potentially arbitrary code execution. This is rated Moderate as successful exploitation requires user interaction, such as processing a specially crafted file.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40553"
},
{
"category": "external",
"summary": "RHBZ#2499657",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499657"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40553"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40553",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40553"
},
{
"category": "external",
"summary": "https://cert.pl/en/posts/2026/07/CVE-2026-40467",
"url": "https://cert.pl/en/posts/2026/07/CVE-2026-40467"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=cca0366144336b49aaa7d5d949966ce8e2c70843",
"url": "https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=cca0366144336b49aaa7d5d949966ce8e2c70843"
}
],
"release_date": "2026-07-13T12:07:56.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Do not run gawk against untrusted scripts, files, or directories to prevent triggering these vulnerabilities. If an attack is attempted, Red Hat\u0027s built-in memory protections will safely crash the program, preventing malicious code execution.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service"
},
{
"cve": "CVE-2026-60001",
"cwe": {
"id": "CWE-307",
"name": "Improper Restriction of Excessive Authentication Attempts"
},
"discovery_date": "2026-07-08T01:01:40.680574+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH\u0027s SSH daemon (sshd). A remote attacker could exploit this vulnerability by repeatedly attempting authentication. The flaw allows the attacker to bypass the intended minimum authentication delay, which can facilitate brute-force attacks. This makes it easier for an attacker to guess valid credentials, potentially leading to unauthorized access or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-60001"
},
{
"category": "external",
"summary": "RHBZ#2497938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-60001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-60001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60001"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:16:15.497000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay"
},
{
"cve": "CVE-2026-66046",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"discovery_date": "2026-08-18T14:21:00.212292+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517901"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Expat XML parsing library. A remote, unauthenticated attacker can supply a specially crafted XML document to trigger quadratic algorithmic complexity in the storeAtts() function, causing excessive CPU consumption and a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: Expat: Denial of Service via quadratic complexity in attribute processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important severity denial of service vulnerability exists in the Expat library due to inefficient algorithmic complexity when processing XML attributes. Applications parsing untrusted XML are susceptible to remote, unauthenticated attacks where a specially crafted XML payload causes excessive CPU exhaustion, ultimately resulting in service unavailability.\n\nThis vulnerability could affect Firefox and Thunderbird, but the DoS attack impact is limited just to the slowdown of tab which loads affected page. The benefit of such attack is questionable, and there are a lot of different ways to cause similar DoS effect. The CVE-2026-76641 fixes CVE-2026-66046.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66046"
},
{
"category": "external",
"summary": "RHBZ#2517901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66046"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66046",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66046"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/1321",
"url": "https://github.com/libexpat/libexpat/pull/1321"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity",
"url": "https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity"
}
],
"release_date": "2026-08-18T14:10:05.176000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate, avoid parsing untrusted XML where possible. Where parsing is required, restrict sources using network controls and enforce strict limits on document size, attribute counts, and request rates at the application or proxy level. Additionally, apply strict execution timeouts to cap parser cost and interrupt processes before they can exhaust CPU resources.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "expat: Expat: Denial of Service via quadratic complexity in attribute processing"
},
{
"cve": "CVE-2026-73073",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-18T15:32:31.052076+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517950"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim\u0027s C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently, operating-system commands on the user\u0027s system. Successful exploitation requires a user to open a C file from an attacker-controlled tree and invoke C omni-completion on a member access whose type is resolved from the malicious tags file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Vim where a local attacker could achieve arbitrary command execution. By crafting a malicious tags file and enticing a user to open a C file from an untrusted source and invoke C omni-completion, the attacker could execute arbitrary commands in the context of the user running Vim. This is considered Important due to the potential for full user-level compromise, despite requiring specific user interaction and a crafted file.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73073"
},
{
"category": "external",
"summary": "RHBZ#2517950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517950"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73073"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f",
"url": "https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0845",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0845"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g",
"url": "https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g"
}
],
"release_date": "2026-08-18T15:25:26.817000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid opening C source files from untrusted sources, especially when accompanied by untrusted tags files. Exercise caution when invoking C omni-completion (CTRL-X CTRL-O) on files from unknown or suspicious origins.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion"
},
{
"cve": "CVE-2026-74860",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"discovery_date": "2026-09-08T07:16:42.486000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: double-free/UAF in libxml2 Python bindings",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat evaluates this vulnerability as having an Important severity because memory corruption resulting from the use-after-free condition could allow remote execution of arbitrary code within the parsing application\u0027s process context. Under typical Red Hat Enterprise Linux deployments, the risk is scoped strictly to Python services that invoke libxml2 push parser interfaces and register custom attribute declaration callbacks on untrusted inputs. Standard C-based libxml2 consumers and applications using tree-based parsing without these specific Python SAX bindings are not exposed to this defect.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74860"
},
{
"category": "external",
"summary": "RHBZ#2529697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74860"
}
],
"release_date": "2026-03-08T09:20:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libxml2: double-free/UAF in libxml2 Python bindings"
},
{
"acknowledgments": [
{
"organization": "Aisle Research",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-77117",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-08-25T08:33:18.006000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2523274"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: Non-progress DoS in SHIFT_JISX0213 -\u0026gt",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in glibc\u0027s SHIFT_JISX0213 to UCS-4 conversion can lead to a denial of service. Exploitation requires an attacker to provide specially crafted input that an application converts using this specific path, triggering a 2-byte sequence and a caller that retries after an E2BIG error with insufficient output space. Red Hat products are only affected if they utilize this uncommon conversion path and exhibit the described retry behavior.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-77117"
},
{
"category": "external",
"summary": "RHBZ#2523274",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523274"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-77117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77117"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77117",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77117"
}
],
"release_date": "2026-08-25T08:36:10.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Do not convert untrusted input using the SHIFT_JISX0213 character set (for example via iconv). Where conversion cannot be avoided, apply process CPU time limits and container cgroup resource limits so a hung converter cannot exhaust host resources.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: Non-progress DoS in SHIFT_JISX0213 -\u0026gt"
},
{
"acknowledgments": [
{
"organization": "Aisle Research",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-80489",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-08-27T08:47:55.722000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2524870"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding (for example with iconv) can cause the converter to make no progress, hanging the calling application. Some EUC_JISX0213 sequences decode to two code points; if the output buffer has room for only the first, the second is stored in conversion state and returned as E2BIG, but that pending character is never cleared after it is emitted on the next call, so retries loop forever without consuming further input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: Non-progress DoS in EUC_JISX0213 -\u003e UCS-4 conversion state",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate denial-of-service flaw in glibc\u0027s EUC_JISX0213 to UCS-4 conversion requires attacker-controlled input on that uncommon charset path and an application that retries conversion with an output buffer small enough to split a two-code-point sequence. Impact is limited to process hang (availability only). The related SHIFT_JISX0213 defect is tracked separately as CVE-2026-77117.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-80489"
},
{
"category": "external",
"summary": "RHBZ#2524870",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524870"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-80489",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80489"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-80489",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80489"
}
],
"release_date": "2026-08-27T08:49:17.578000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this avoid converting untrusted data with that charset, or disable the conversion path if unused. Where conversion of untrusted input cannot be avoided, restrict access to trusted clients and apply process CPU/resource limits to contain hang impact.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: Non-progress DoS in EUC_JISX0213 -\u003e UCS-4 conversion state"
},
{
"cve": "CVE-2026-84782",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-18T19:58:21.939000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2537080"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an unauthenticated network adversary can trigger process crashes or memory exposure without requiring local system privileges. Red Hat Enterprise Linux utilizes OpenSSL as the fundamental cryptographic provider across the operating system; however, overall exposure is limited because the flaw strictly affects software using Datagram Transport Layer Security (DTLS) over UDP under non-blocking I/O configurations. Standard TLS connections over TCP, which represent the typical deployment model for the majority of Red Hat workloads and system services, are unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84782"
},
{
"category": "external",
"summary": "RHBZ#2537080",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537080"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84782"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782",
"url": "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782"
}
],
"release_date": "2026-09-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission"
},
{
"cve": "CVE-2026-86138",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-09-05T04:31:00.379678+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528986"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the `xmlDictAddQString` function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its integrity and confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity heap-based buffer overflow in libxml2, specifically within the `xmlDictAddQString` function, could enable arbitrary code execution. While no user interaction or privileges are required, the high attack complexity and local attack vector reduce the overall risk in Red Hat environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86138"
},
{
"category": "external",
"summary": "RHBZ#2528986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528986"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86138"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86138",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86138"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4",
"url": "https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
"url": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4"
}
],
"release_date": "2026-09-05T04:21:53.127000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Bound XML document and QName (prefix + local name) size before intern. Cap process and cgroup memory so a ~4 GiB dictionary pool cannot be built. Keep FORTIFY_SOURCE and heap hardening on Red Hat binaries.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow"
},
{
"cve": "CVE-2026-86140",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-09-05T04:41:05.796692+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528989"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the `xmlSnprintfElements` function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in libxml2 allows a local attacker to achieve arbitrary code execution due to a stack-based buffer overflow. While requiring local access, the vulnerability\u0027s presence in a fundamental system library could lead to significant system compromise if exploited.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86140"
},
{
"category": "external",
"summary": "RHBZ#2528989",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528989"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86140"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340",
"url": "https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
"url": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4"
}
],
"release_date": "2026-09-05T04:26:13.860000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this, administrators should disable DTD processing and validation for untrusted documents within libxml2 parsers and restrict network access so only authorized users can submit XML data to the application. For robust defense-in-depth against buffer overflow exploitation, ensure the library and dependent applications are compiled with memory safety flags like stack canaries (-fstack-protector-strong) and bounds checking (_FORTIFY_SOURCE=2), while verifying that standard OS-level protections such as ASLR and Data Execution Prevention (NX/XD Bit) are active on the host system.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements"
},
{
"cve": "CVE-2026-86142",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-09-05T04:41:08.714165+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528990"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in libxml2\u0027s xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer() expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure, data corruption, or a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A heap-based buffer overflow in libxml2\u0027s xmlXPtrEvalXPtrPart function enables an out-of-bounds write during the evaluation of oversized xpointer() expressions. The flaw is assigned a Moderate severity rating because exploitation strictly requires local access and complex, multi-gigabyte payload inputs, effectively mitigating the threat of remote or automated system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86142"
},
{
"category": "external",
"summary": "RHBZ#2528990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86142"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58",
"url": "https://github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
"url": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113"
}
],
"release_date": "2026-09-05T04:29:33.323000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this applications should avoid passing untrusted XPointer expressions into xmlXPtrEval or XInclude xpointer= attributes and strictly cap input length well below INT_MAX. Additionally, administrators should enforce process or cgroup memory limits to prevent the construction of multi-gigabyte scheme bodies, relying on heap allocator hardening rather than standard fortify flags, which cannot stop this byte-store loop.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation"
},
{
"cve": "CVE-2026-86143",
"cwe": {
"id": "CWE-192",
"name": "Integer Coercion Error"
},
"discovery_date": "2026-09-05T04:40:59.552825+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528987"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact: This flaw in libxml2, a widely used XML parsing library, is due to an integer overflow in write callbacks. This can lead to negative lengths being passed to write operations, potentially causing data integrity issues in applications that process untrusted XML input and utilize affected write callbacks. The impact is limited to applications that specifically trigger this overflow condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86143"
},
{
"category": "external",
"summary": "RHBZ#2528987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86143"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35",
"url": "https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
"url": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111"
}
],
"release_date": "2026-09-05T04:31:21.187000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Cap process and cgroup memory so a process cannot build a \u22652 GiB libxml2 output backlog. Keep FORTIFY_SOURCE-built Red Hat binaries so some callback copies of the truncated length abort instead of corrupting memory",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks"
},
{
"cve": "CVE-2026-86144",
"cwe": {
"id": "CWE-669",
"name": "Incorrect Resource Transfer Between Spheres"
},
"discovery_date": "2026-09-05T04:50:58.626617+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528992"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in libxml2\u0027s XInclude processing (xmlXIncludeProcess and xmlXIncludeProcessTree) fails to propagate parser flags like XML_PARSE_NONET. This allows custom resource loaders to fetch external network resources, potentially enabling Server-Side Request Forgery (SSRF), XML External Entity (XXE) injection, or Denial of Service (DoS) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate-severity flaw in libxml2 XInclude processing allows custom resource loaders to bypass network restriction flags, enabling unintended external network connections that could cause SSRF, information disclosure, or Denial of Service (DoS). Exploitation requires local access alongside high attack complexity, limiting its immediate widespread impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86144"
},
{
"category": "external",
"summary": "RHBZ#2528992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528992"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86144"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/commit/b63cd517afecb76582dd9488c55e54ceaf50de61",
"url": "https://github.com/GNOME/libxml2/commit/b63cd517afecb76582dd9488c55e54ceaf50de61"
},
{
"category": "external",
"summary": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4",
"url": "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4"
}
],
"release_date": "2026-09-05T04:34:43.972000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Do not expand untrusted XInclude; parse without XML_PARSE_XINCLUDE and do not call xmlXIncludeProcess / xmlXIncludeProcessTree. If XInclude is required, pass XML_PARSE_NONET (and XML_PARSE_NO_XXE where available) via xmlXIncludeProcessFlags, and restrict outbound fetches.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation."
},
{
"cve": "CVE-2026-86145",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-05T05:20:54.676360+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528993"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the `pcre2_dfa_match` function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction with a small heap limit. This could lead to data corruption or potentially arbitrary code execution, compromising the integrity and availability of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An out-of-bounds write vulnerability in the PCRE2 library, specifically within the `pcre2_dfa_match` function, could allow arbitrary code execution. This flaw is exploitable in Red Hat products when processing attacker-controlled regular expressions or when a recursive pattern is used in conjunction with a small, API-set heap limit, making it dependent on specific application usage patterns.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86145"
},
{
"category": "external",
"summary": "RHBZ#2528993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528993"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86145"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf"
}
],
"release_date": "2026-09-05T05:09:25.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches\u2014such as the reuse of cached memory workspaces\u2014enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions"
},
{
"cve": "CVE-2026-89156",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-11T04:20:54.923994+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531743"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. An attacker can provide invalid UTF (Unicode Transformation Format) data, leading to an out-of-bounds read during a Just-In-Time (JIT) fallback. This vulnerability could potentially result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An out-of-bounds read can occur in PCRE2 when processing specially crafted invalid UTF data during a JIT fallback. Exploitation requires an application using PCRE2 to process untrusted input with JIT enabled, which may lead to a denial of service or information disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89156"
},
{
"category": "external",
"summary": "RHBZ#2531743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531743"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89156"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x"
}
],
"release_date": "2026-09-11T04:03:05.876000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback"
},
{
"cve": "CVE-2026-89157",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-11T04:20:57.926410+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531744"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2_pattern_convert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability impact, causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Out-of-bounds write via large pattern input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This out-of-bounds write vulnerability in PCRE2 on 32-bit platforms could lead to data corruption with high integrity impact and potential denial of service. Exploitation requires an attacker to provide a specially crafted large pattern, but no privileges or user interaction are needed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89157"
},
{
"category": "external",
"summary": "RHBZ#2531744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531744"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89157"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9"
}
],
"release_date": "2026-09-11T04:05:27.069000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pcre2: PCRE2: Out-of-bounds write via large pattern input"
},
{
"cve": "CVE-2026-89158",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-11T04:21:03.968148+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531746"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate impact flaw was found in PCRE2 affecting 32-bit platforms, where an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. While exploitable over the network without requiring user interaction or privileges, the high attack complexity reduces its overall severity. Successful exploitation could result in high integrity impact, such as data corruption, or a low availability impact, leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89158"
},
{
"category": "external",
"summary": "RHBZ#2531746",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531746"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89158"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859"
}
],
"release_date": "2026-09-11T04:07:21.973000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms"
},
{
"cve": "CVE-2026-89160",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-11T04:21:00.943707+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531745"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF (Unicode Transformation Format) characters. This could lead to a denial of service, making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Low impact. A denial of service could occur in applications utilizing PCRE2 for regular expression matching if specially crafted invalid UTF input is processed. The high attack complexity required to trigger this out-of-bounds read limits its overall impact on Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89160"
},
{
"category": "external",
"summary": "RHBZ#2531745",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531745"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89160",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89160"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89160",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89160"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-9qww-pwc4-77qq",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-9qww-pwc4-77qq"
}
],
"release_date": "2026-09-11T04:09:06.527000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching"
},
{
"cve": "CVE-2026-89161",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-09-11T04:21:06.963234+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531747"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2, a library for processing regular expressions. The `pcre2_jit_match` function, which handles just-in-time (JIT) compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to cause the application to crash, leading to a denial of service, or potentially execute unauthorized code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important memory corruption vulnerability in PCRE2\u0027s JIT compiler. An attacker could exploit a flaw in `pcre2_jit_match` when a previously copied subject is passed as context, potentially leading to arbitrary code execution or denial of service. The high attack complexity and local attack vector reduce the overall risk, but the widespread use of PCRE2 and the potential for severe impact warrant the Important classification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89161"
},
{
"category": "external",
"summary": "RHBZ#2531747",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531747"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89161",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89161"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89161",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89161"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/pull/937",
"url": "https://github.com/PCRE2Project/pcre2/pull/937"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
}
],
"release_date": "2026-09-11T04:11:51.666000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match"
},
{
"cve": "CVE-2026-93990",
"cwe": {
"id": "CWE-176",
"name": "Improper Handling of Unicode Encoding"
},
"discovery_date": "2026-09-22T21:50:24.320578+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538967"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Expat. This vulnerability allows a remote attacker to send specially crafted UTF-16 encoded XML data. Due to improper validation of surrogate characters, the parser can be tricked into accepting malformed sequences, which can hide legitimate markup characters. This could enable XML injection attacks, potentially leading to information disclosure or other integrity impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: Expat: XML Injection via Malformed UTF-16 Input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Expat, which can lead to XML injection. The vulnerability arises from improper validation of UTF-16 surrogate pairs, allowing attackers to craft malformed XML that can bypass parser security checks. This could result in data integrity compromise in applications processing untrusted XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93990"
},
{
"category": "external",
"summary": "RHBZ#2538967",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538967"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93990"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat",
"url": "https://github.com/libexpat/libexpat"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a",
"url": "https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/1282",
"url": "https://github.com/libexpat/libexpat/pull/1282"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate",
"url": "https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate"
}
],
"release_date": "2026-09-19T22:58:11.224000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "To mitigate this restrict which hosts can send XML (including UTF-16) to Expat-based services with a host firewall and network segmentation. Where applications allow, prefer UTF-8-only input and reject unexpected encodings.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "expat: Expat: XML Injection via Malformed UTF-16 Input"
},
{
"acknowledgments": [
{
"names": [
"Ermenson Junior"
],
"organization": "Independent security research",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2026-96512",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2026-08-28T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing \u0027Z\u0027 timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an unprivileged local user can set TZ to an extreme timezone offset to shift the authorization window by up to approximately 25 hours, causing expired rules to be treated as valid. This allows the user to execute commands outside the intended time window. Authentication is not bypassed; only the time-based authorization check is affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because a local authenticated user can bypass time-based sudoers restrictions and execute privileged commands outside the configured validity window. Exploitation requires a sudoers rule with NOTBEFORE or NOTAFTER timestamps that omit the trailing \u0027Z\u0027 suffix, and the attacker must be the subject of such a rule. This is an optional feature not enabled in default configurations. PAM authentication is unaffected; the attacker cannot gain access beyond what the sudoers rule already grants. Sudo calls unsetenv(\"TZ\") and tzset() early in startup as a partial defense, but upstream accepted and fixed the vulnerability, indicating this control is insufficient on at least some platforms. Red Hat ships sudo in all supported RHEL versions (RHEL 7 through RHEL 10 and RHIVOS). Red Hat product impact analysis for specific streams is pending affect filing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96512"
},
{
"category": "external",
"summary": "RHBZ#2539327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96512"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/1820a349687522f51023d1ae5925125f59679a8c",
"url": "https://github.com/sudo-project/sudo/commit/1820a349687522f51023d1ae5925125f59679a8c"
}
],
"release_date": "2026-09-23T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Append the \u0027Z\u0027 timezone suffix to all NOTBEFORE and NOTAFTER timestamps in sudoers rules. For example, change \u0027NOTAFTER=20261231235959\u0027 to \u0027NOTAFTER=20261231235959Z\u0027. Timestamps with the \u0027Z\u0027 suffix are interpreted as UTC via timegm() and are not affected by the TZ environment variable. Administrators can audit their sudoers configuration with: grep -rE \u0027NOT(BEFORE|AFTER)=\u0027 /etc/sudoers /etc/sudoers.d/ and verify that all timestamps end with \u0027Z\u0027.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization"
},
{
"cve": "CVE-2026-103111",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-30T04:40:56.869940+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543797"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time (JIT) compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt memory, or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because applications that compile untrusted regular expressions using PCRE2 Just-In-Time (JIT) execution interfaces may allow memory corruption and arbitrary code execution. The risk is primarily confined to specific custom applications or specialized network services that process external regular expressions using vulnerable JIT routines.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-103111"
},
{
"category": "external",
"summary": "RHBZ#2543797",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543797"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-103111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-103111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-103111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103111"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m"
}
],
"release_date": "2026-09-30T04:13:59.115000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T13:34:00+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:de9de6346921c5ac663dbcd0faf13a915aaca6dbbe41ab14185af73f3da71bed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:ce1ee2791cedd451f55dbf41487520b7911eebc7454ddd4196dcdb705def4052_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:481cf8c03eefc2786e320b56d726f1f33688e4d510505585d5ee0f014bad4eba_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8e5b2f7adbb56e404e39a699b95266539ce547583ee6c9976decbaad4a35541b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:fa09f523d2501e42f9c78c18bd99475f562e7397ed75d8c0fc8e183bcbf4c827_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pcre2: pcre2: Out-of-bounds write via crafted regular expression"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.